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***PROPOSED AMENDMENT SUBMITTED FOR DISCUSSION PURPOSES ONLY*** 
THE CLAIMS; 

This following listing of claims is submitted as a proposed amendment and is NOT 
intended to replace all prior versions, and listings, of claims in the application: 

Claim 1 (canceled): 

Claim 2 (currently amended): A security method for use in a communication system, the 
security method comprising: 

receiving an IP packet including a source address and a destination address; 
obtaining physical location information indicating the a location of a user device 
which is the a source of said IP packet prior to delivery of the packet to the destination 
address, and wherein d e t e rminin g said obtaining physical location information indicating 
the location of the user device further includes performing a database lookup operation to 
retrieve a geographic location stor e d in association with corresponding to an edge router 
and port information obtained from said edge router : and 

determining, as a function of the obtained physical location information, an action 
to be taken, wherein determining an action to be taken includes: 

comparing the obtained physical location information to information 
listing physical locations authorized to obtain access to a service for which 
security is to be provided. 

Claim 3 (original): The security method of claim 2, fiirther comprising: 

dropping said packet when said comparing does not result in a match between the 
obtained physical location information and the information listing physical locations 
authorized to obtain access to the service. 

Claim 4 (original): The security method of claim 2, wherein said service is one of a 
banking service, video on demand service and a music on demand service. 

Claim 5 (original): The security method of claim 2, further comprising: 
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forwarding said packet to the destination address when said comparing results in a 

match between the obtained physical location information and the information listing 

physical locations authorized to obtain access to the service. 

Claim 6 (canceled): 

Claim 7 (currently amended): A security method for use in a communication system, the 
security method comprising: 

receiving an IP packet including a source address and a destination address; 

obtaining physical location information indicating the a location of a user device 
which is the a source of said IP packet prior to delivery of the packet to the destination 
address, including transmitting a location information request message including the source 
address of the received IP packet and receivings in response to said transmitted location 
information request message, information corresponding to the location of the user device; 

determining, as a function of the obtained physical location information, an action 
to be taken, and 

determining the location of the user device from edge router information and port 
information obtained from an edge router identified by said edge router information , and 
wherein the determining the location of the user device furth e r includes performing a 
database lookup operation to retrieve a geographic location stored in association with said 
edge router information and said port information. 

Claim 8 (canceled): 

Claim 9 (currently amended): A security method for use in a communication system, the 
security method comprising: 

(a) receiving an IP packet including a source address and a destination address; 

(b) obtaining physical location information indicating the a location of a user device 
which is the a source of said IP packet, by: 

(i) transmitting a location information request message including the source 
address of the received IP packet, 

3 



01-1518 
10/616,449 

***PROPOSED AMENDMENT SUBMITTED FOR DISCUSSION PURPOSES ONLY*** 
(ii) receiving in response to said transmitted location information request 

message, information corresponding to the location of the user device determined from 

edge router information indicating an edge router corresponding to said source address and 

port information obtained from an said edge router and a device identifier associated with 

the source address of said IP packet ; 

(iii) performing a database lookup op e ration to retri e v e a g e ographic 

location stored in association with said e dg e rout e r and port information , and 

t*v 

(c) comparing the a received device identifier to a list of device identifiers 
corresponding to stolen devices, 
and 

(e) (d) determining, when said comparing indicates a match between the received 
device identifier and a device identifier on said list, as a fimction of th e obtain e d physical 
location informatio n^ taking an action involving use of said obtained physical location 
information t o b e tak e n . 

Claim 10 (original): The security method of claim 9, wherein said device identifier is a 
MAC address. 

Claim 1 1 (currently amended): The method of claim 9, fiuth e r comprising: wherein said 
taking an action involving use of said obtained physical location information includes: 

generating a message indicating the detection of a stolen device when said 
comparing step detects a match between the received device identifier and a device 
identifier in said hst of device identifiers corresponding to stolen devices. 

Claim 12 (currently amended): The method of claim 11, wherein said generated message 
includes information indicating the a geographic location where the identified stolen device 
is being used. 

Claim 13 (original): The method of claim 12, wherein said geographic location is a post 

office address. 
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Claims 14-15 (canceled): 

Claim 16 (currently amended): A security device for use in a communication system in 
which IP packets are transmitted, the device comprising: 

means for receiving an IP packet including a source address and a destination 
address; 

means for obtaining physical location information indicating the a location of a user 
device which is the a source of said IP packet prior to delivery of the packet to the 
destination address, wherein said obtaining means d e t e rmining th e location of th e us e r 
d e vice further includes means for performing a database lookup operation to retrieve a 
geographic location stored in association with edge router information and port information 
obtained from an edge router identified by said edge router information : and 

means for determining, as a fiinction of the obtained physical location information, 
an action to be taken; 

a database of physical location information listing physical locations authorized to 
obtain access to said service; and 

wherein said determining means for determining an acti o n to be taken includes a 
comparator for comparing the obtained physical location information to information listing 
physical locations authorized to obtain access to a service for which security is to be 
provided. 

Claim 17 (original): The security device of claim 16, fiirther comprising: 

means for dropping said packet when said comparing does not result in a match 
between the obtained physical location information and the information listing physical 
locations authorized to obtain access to the service. 

Claim 18 (original): The security device of claim 2, wherein said service is one of a 
banking service, video on demand service and a music on demand service. 



Claims 19-31 (canceled): 
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Claim 32 (currently amended): A location verification method, the method comprising; 

receiving an IP packet including a source address and a destination address; 

determining from said source address , edge router information corresponding to 
said source address, and port information obtained from an edge router identified by said 
edge router information, the a physical location from which said IP packet was sent prior to 
delivery of the packet to the destination address; 

comparing the determined physical location informati ea to e xp e ct e d informatio n 
indicating th e an expected physical location of the source of as said IP packet; and 

determining a reporting error when said determined physical location informatie a 
does not match the expected physical location information . 

Claim 33 (original): The location verification method of claim 32, fiuther comprising: 

transmitting a message including information on the determined reporting error to a 
law enforcement authority. 

Claim 34 (currently amended): The location verification method of claim 33, further 
comprising: 

including the determined physical location information in said message. 

Claim 35 (original): The location verification method of claim 34, further comprising: 

identifying the device transmitting said IP packet from a MAC address determined 
from a database associating said MAC address with said source address. 

Claim 36 (currently amended): A location verification method, the method comprising; 

receiving an IP packet including a source address wherein said IP packet is 
transmitted from a bracelet worn by a parolee and wherein said IP packet includes parolee 
identification information; 

determining from said source address , edge router information corresponding to 
said source address, and port information obtained from an edge router identified by said 
edge router information, the a physical location from which said IP packet was sent; 
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comparing the determined physical location informati ea to e xpect e d informatio n 

indicating th e an expected physical location of the source of ^ said IP packet; 

determining a reporting error when said determined physical location informatio n 
does not match the expected physical location information ; 

transmitting a message including information on the determined reporting error to a 
law enforcement authority; 

including the determined physical location information in said message; 

identifying the a device transmitting said IP packet from a MAC address determined 
from a database associating said MAC address with said source address; and 

including in said message information obtained from said IP packet identifying the 
parolee. 

Claim 37 (original): The location verification method of claim 33, fiirther comprising: 
determining if said IP packet was sent at a predetermined time during which a 
location reporting message was scheduled to be transmitted. 
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